PyPI/ansys-geometry-core CVE-2024-29189: high 7.4, EPSS 0.34%
ansys-geometry-core OS Command Injection vulnerability
Action: Upgrade ansys-geometry-core to 0.3.3 or later.
pip install ansys-geometry-core==0.3.3pip install ansys-geometry-core==0.4.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | 0.3.3 | - |
| 0.4.0 | 0.4.12 | - |
Fixed versions
| 0.3.3 | 0.4.12 |
Sources
- osv: PYSEC-2026-1127
- https://github.com/ansys/pyansys-geometry/security/advisories/GHSA-38jr-29fh-w9vm
- https://nvd.nist.gov/vuln/detail/CVE-2024-29189
- https://github.com/ansys/pyansys-geometry/pull/1076
- https://github.com/ansys/pyansys-geometry/pull/1077
- https://github.com/ansys/pyansys-geometry/commit/902071701c4f3a8258cbaa46c28dc0a65442d1bc
- https://github.com/ansys/pyansys-geometry/commit/f82346b9432b06532e84f3278125f5879b4e9f3f
- https://bandit.readthedocs.io/en/1.7.8/plugins/b602_subprocess_popen_with_shell_equals_true.html
- https://github.com/ansys/pyansys-geometry
- https://github.com/ansys/pyansys-geometry/blob/52cba1737a8a7812e5430099f715fa2160ec007b/src/ansys/geometry/core/connection/product_instance.py#L403-L428
- https://pypi.org/project/ansys-geometry-core
- https://github.com/advisories/GHSA-38jr-29fh-w9vm
CVE-2024-29189 · published · modified · JSON